WordPress versions 5.9 and below suffer from a cross site scripting vulnerability in the author and contributor roles. Per the researcher, WordPress is addressing this in their next release and…

Cain and Abel version 4.9.56 suffers from an unquoted service path vulnerability.

WordPress Jetpack plugin version 9.1 suffers from a cross site scripting vulnerability.

Tokheim Profleet DiaLOG Fuel Management System version 11.005.02 suffers from a remote SQL injection vulnerability that can allow for remote code execution.

WordPress Secure Copy Content Protection and Content Locking plugin version 2.8.1 suffers from a remote SQL injection vulnerability.

Hospital Management Startup version 1.0 suffers from a remote SQL injection vulnerability.

WordPress VeronaLabs WP Statistics plugin versions 13.1.4 and suffer from a remote unauthenticated blind SQL injection vulnerability.

Home Owners Collection Management System version 1.0 suffers from a remote blind SQL injection vulnerability.

Home Owners Collection Management System version 1.0 suffers from an unauthenticated account takeover flaw due to missing authorization controls.